CVE-2025-7452 kone-net go-chat Endpoint file_controller.go GetFile path traversal

A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/filecontroller.go of the component Endpoint. The manipulation of the argument fileName leads t...

CVE-2025-7452 kone-net go-chat Endpoint file_controller.go GetFile path traversal

A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/filecontroller.go of the component Endpoint. The manipulation of the argument fileName leads t...

Live Helper Chat lhc-php-resque Extension 安全漏洞

Live Helper Chat lhc-php-resque Extension is an open source extension for Live Helper Chat. A security vulnerability exists in Live Helper Chat lhc-php-resque Extension, which originates from a parameter queue name operation leading to cross-site scripting...

PT-2025-29271 · Unknown · Kone-Net Go-Chat

Name of the Vulnerable Software and Affected Versions: kone-net go-chat affected versions not specified Description: A critical issue exists in the Endpoint component of kone-net go-chat. The GetFile function within go-chat/api/v1/file controller.go is susceptible to path traversal due to...

go-chat 路径遍历漏洞

go-chat is a KONENET open source WebSocket-based communication and chat software using Go. A path traversal vulnerability exists in go-chat, which stems from a path traversal caused by the fileName operation...

CVE-2025-7189

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-7187

A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetchmember.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-7186

A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetchchat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +1 more potentially affected by CVE-2025-53548 via @clerk/nextjs (>=6.3.1, <=6.17.0)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

CVE-2025-3467

An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers. This vulnerability allows an attacker to obtain the administrator's token by sending a payload in the published chat. When the administrator views the conversation content through the...

The vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Cisco Enterprise Chat and Email ECE web interface is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-7189

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-7189

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-7189 code-projects Chat System send_message.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-7189 code-projects Chat System send_message.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-7189

CVE-2025-7189 affects code-projects Chat System 1.0. The vulnerability is an SQL injection in the file /user/send_message.php, caused by lack of validation of the msg parameter. The issue can be exploited remotely and has publicly disclosed exploit information. Impact is described as potentially ...

CVE-2025-7188 code-projects Chat System addmember.php sql injection

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...